mod_perl Source Code Distributions

This download page includes only the sources to compile and build mod_perl yourself with the proper tools. To download a precompiled distribution for your platform please see here.

Important Notices

• Download from your nearest mirror site!
• Binary Releases
• Current Releases
• Older Releases
• PGP Signatures

URL regular expression DoS (CVE-2007-1349)

A flaw was discovered in the Apache::PerlRun module shipped with mod_perl 1.29 and earlier and in the ModPerl::RegistryCooker module shipped with mod_perl 2.03 and earlier. A remote attacker could craft a URL with a path that would be interpreted as a regular expression, potentially allowing a denial of service by creating an expression that will take a very long time to run. This vulnerability only affects Apache::PerlRun and custom subclasses of ModPerl::RegistryCooker that explicitly use the namespace_from_uri() method. The Apache::Registry, ModPerl::PerlRun, and ModPerl::Registry modules are NOT affected.

Users of mod_perl 1.29 and earlier are encouraged to upgrade to 1.30 if they use Apache::PerlRun for their applications. Users of mod_perl 2.03 are encouraged to check their custom code for calls to the namespace_from_uri() method and replace it with the namespace_from_filename() method.

 Name                    Last modified      Size  Description
 Parent Directory                             -   Perl project
 contrib/                2022-06-17 14:50    -   Perl project
 win32-bin/              2022-06-17 14:50    -   Perl project
 HEADER.html             2014-01-27 09:59  1.6K  Perl project
 README.html             2023-10-21 12:05  2.0K  Perl project
 mod_perl-1.31.tar.gz    2013-11-22 08:37  381K  Perl project
 mod_perl-2.0.13.tar.gz  2023-10-21 12:05  3.7M  Perl project